Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/imLZssAe-MMZM-TmLaPB7WdKAeY.roa
File: imLZssAe-MMZM-TmLaPB7WdKAeY.roa (raw, json)
Hash identifier: nhnjBqowZqyblgzzglm88wDCjGNWryeBXHaBbj/vkTM=
Subject key identifier: 8A:62:D9:B2:C0:1E:F8:C3:19:33:E4:E6:2D:A3:C1:ED:67:4A:01:E6
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 018CC5DC300D8DF155FC60D60D969F7DD4C8
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/imLZssAe-MMZM-TmLaPB7WdKAeY.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210790
IP address blocks: 193.3.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:30:0d:8d:f1:55:fc:60:d6:0d:96:9f:7d:d4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a62d9b2c01ef8c31933e4e62da3c1ed674a01e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:dd:73:95:ff:5a:0e:c0:5e:60:51:3c:da:
89:f5:ab:d9:f1:5c:ca:6f:24:14:45:cf:75:57:10:
6b:ac:d4:e7:59:d7:e0:3e:5c:7b:69:d8:56:ae:5b:
04:15:e3:c7:a6:7e:b8:7d:45:58:bb:b7:00:50:cc:
e0:7b:af:07:1f:7b:17:c4:80:35:33:04:7d:70:bb:
05:e5:e1:97:34:d4:08:6f:7b:f4:48:95:35:bf:ca:
d2:45:c4:da:75:b8:a4:3a:f7:2b:08:c8:f5:06:b2:
1d:19:47:01:9e:b7:14:17:8e:38:4b:46:14:e0:a3:
42:b0:04:cd:b8:bc:85:80:3f:4e:2e:f4:58:b6:2c:
82:2b:55:20:fe:d0:67:9a:cb:7f:a4:66:5a:ed:0a:
72:ef:3e:6a:dc:c2:aa:c4:ce:57:ac:c2:51:01:4b:
f2:39:8c:1d:e7:47:c2:ca:69:a2:fb:29:5e:38:6d:
65:71:85:23:b2:44:89:a8:e6:d4:98:f1:6d:13:3a:
64:c0:c7:54:21:f0:a4:f7:18:b0:f6:05:26:92:7c:
41:31:2c:1f:fb:af:c7:59:f3:fc:5c:0a:f0:a6:44:
00:3a:f1:33:85:26:fc:6a:df:b0:a9:fa:8d:23:07:
e9:e2:cc:38:1f:39:35:6d:dc:cb:57:76:eb:dc:d6:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:D9:B2:C0:1E:F8:C3:19:33:E4:E6:2D:A3:C1:ED:67:4A:01:E6
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/imLZssAe-MMZM-TmLaPB7WdKAeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.0.0/24
Signature Algorithm: sha256WithRSAEncryption
85:12:07:3a:39:4b:95:a4:c8:bb:55:1a:2c:a8:0d:53:6d:ad:
d1:3b:d7:ee:84:25:1e:72:3b:a2:ae:e5:4b:b6:c8:32:33:9d:
8c:7c:17:91:07:7f:d1:32:ad:2a:da:b9:b3:54:ea:6a:a7:36:
c7:1a:79:ed:99:b2:0c:5a:19:07:7c:c4:10:1f:40:4a:5e:dd:
70:57:54:dc:63:f1:8b:5d:bd:cc:11:96:c2:7a:c8:67:f7:73:
33:89:73:e9:21:8a:bd:29:9d:5a:63:2e:96:10:7f:35:9c:12:
c1:2e:25:1f:19:c1:3c:94:31:36:9a:58:4e:ee:05:14:51:12:
d2:d8:e9:e7:b5:42:e6:a8:09:c4:f3:bf:9d:08:d6:f6:2b:79:
f0:cb:e8:40:4b:3a:bd:65:35:c2:3c:bc:5f:98:68:e0:6a:d5:
99:f4:e9:df:18:61:61:7d:2f:e4:c8:87:7e:73:0c:7d:f1:9b:
63:ca:5e:0a:20:82:c5:32:0b:f8:ec:6d:f8:8b:77:31:0a:9f:
88:6a:7c:2c:36:c4:99:f0:4d:cf:51:63:33:c3:ba:61:3d:b6:
25:cd:3e:10:f8:2d:0c:3b:ef:3b:bf:d8:bd:27:32:e5:97:d6:
6a:0a:f0:4c:ff:d9:6b:03:dd:57:7a:77:a3:79:7b:bc:ee:85:
8b:3d:65:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:45:24 2024 by rpki-client on console-fra.rpki-client.org